From 19 June 2026, every UK business that handles personal data must have a statutory complaints process. Here is what the new DUAA rules mean, and a short, practical readiness checklist for SMEs.